Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
File: tOiC9xca9tzczJzXn5jexnV_4Yk.mft (raw, json)
Hash identifier: pX0timT8/cZ1WlNodSHiwzb1qbtO9y97etmOk/d4I5M=
Subject key identifier: F4:6A:1D:C4:70:D7:7D:29:14:F5:34:90:5A:37:B0:E9:FC:FB:57:21
Authority key identifier: B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
Certificate issuer: /CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Certificate serial: 0194BC72B82D739E35CD9219C4FDFBB14200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: WmxX7pBfpD5c2m2kHOUO4M_bBgA.roa (hash: q0DpW8XtR4IxHRwLJz0IGFkpb8cJ4HYo8d4HsEmNl8o=)
2: tOiC9xca9tzczJzXn5jexnV_4Yk.crl (hash: hI6Bg/FORRDAq/Om3hZdtSHqlWazEyi+3mq1HqSqbI4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b8:2d:73:9e:35:cd:92:19:c4:fd:fb:b1:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e882f7171af6dcdccc9cd79f98dec6757fe189
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=f46a1dc470d77d2914f534905a37b0e9fcfb5721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:05:61:80:ef:a5:48:02:89:43:a9:7c:34:57:
27:ba:81:e5:59:ca:7e:34:06:07:21:a5:95:2a:2d:
32:85:aa:63:79:db:1b:a3:f5:7b:27:e4:0e:b8:01:
0a:f2:f4:db:9c:43:c2:2d:65:d1:f2:8f:6b:e5:28:
c9:e2:66:0a:6d:1f:8b:07:8d:e2:df:23:97:c6:6f:
ac:a1:73:cc:fd:24:dd:1b:0e:53:03:fe:96:4f:57:
33:be:83:51:20:b8:2d:9b:4a:f3:4d:82:4a:47:5b:
71:c0:bf:ea:8b:46:d1:bd:21:18:20:dc:8a:00:bd:
7c:47:84:a7:67:51:15:f6:43:a6:6d:b2:68:6b:4e:
2e:82:87:c2:1e:5b:43:88:3e:7c:8a:0c:2e:24:c9:
52:dd:ce:ad:57:81:2a:82:52:c8:1b:99:9a:26:90:
85:8e:c6:6b:8c:1b:5e:92:64:0f:b4:fe:68:71:e6:
b7:2c:4a:db:2b:fa:cf:d8:e8:f0:cc:95:6d:00:76:
06:35:57:d3:66:eb:e7:6f:4c:a9:2f:82:76:d4:e5:
16:9e:a3:5c:5d:42:3e:f7:07:41:90:c9:1e:53:07:
8f:21:ab:8c:71:e0:e7:91:4b:51:e0:85:81:86:91:
4b:0a:d2:4f:56:a0:e4:d4:18:fc:4b:88:e4:ba:28:
15:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6A:1D:C4:70:D7:7D:29:14:F5:34:90:5A:37:B0:E9:FC:FB:57:21
X509v3 Authority Key Identifier:
keyid:B4:E8:82:F7:17:1A:F6:DC:DC:CC:9C:D7:9F:98:DE:C6:75:7F:E1:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOiC9xca9tzczJzXn5jexnV_4Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5f5bc8-e5f3-421d-9fa0-fefe8e34006c/1/tOiC9xca9tzczJzXn5jexnV_4Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ca:99:50:76:ff:d7:af:cb:57:83:78:b9:e8:0d:cd:44:38:
62:68:c1:39:94:86:bd:af:65:c7:f7:56:e6:94:2a:30:b0:b2:
00:bf:58:c0:89:58:7d:d7:10:5b:fa:1c:77:f0:68:4c:f4:96:
4f:78:49:96:e8:0f:0f:06:46:8f:04:30:67:d6:51:00:43:02:
5e:3a:5f:64:9b:8d:26:51:c5:96:83:e9:dd:cf:82:56:99:5d:
2e:b6:38:ff:5c:a4:46:bb:73:f3:7c:65:8f:95:96:49:09:cc:
47:ce:96:1a:6e:aa:34:a1:ee:d4:c0:e0:c2:30:13:0d:de:33:
d7:2d:fe:b7:d9:54:28:d9:9a:81:9d:d0:70:c9:74:ca:fc:85:
2b:66:d1:d6:4a:97:5b:a8:b3:4f:dd:7c:5a:41:92:f9:38:b2:
06:09:29:0d:e5:e7:7b:ff:7d:f3:1e:42:e1:a0:34:b7:d7:0b:
c5:dd:75:19:02:ec:a6:ba:ab:0d:d9:6b:e2:b7:3b:7c:b6:90:
f5:28:12:95:a5:86:4f:a2:82:c9:54:93:49:db:6a:3a:61:1b:
06:ec:9d:8a:13:c2:09:e4:76:16:04:12:ab:46:a4:20:a8:f5:
90:31:c5:5e:2c:c5:45:8c:99:cb:cf:65:f8:ae:5f:8a:ae:04:
a2:6d:66:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:21 2025 by rpki-client